Missing authorization in the setWiFiGuestCfg handler of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets remote unauthenticated attackers create or weaken the guest wireless network by POSTing a crafted request to /cgi-bin/cstecgi.cgi. Because the setter applies configuration without any session or credential check, an attacker can stand up an open/weakly-secured guest SSID or downgrade guest isolation without ever authenticating. No public exploit is identified at time of analysis and EPSS is low (0.16%), but exploitation is trivial against the affected build.
Unauthenticated device deletion in the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets remote attackers remove any managed slave device by sending a crafted POST request to /cgi-bin/cstecgi.cgi. The delDevice function fails to enforce access control (CWE-284), so no credentials are needed. No public exploit identified at time of analysis, and EPSS is low (0.16%, 6th percentile), indicating limited observed interest despite the high CVSS 9.1 rating.
Incorrect access control in the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets unauthenticated remote attackers hijack the device's Wi-Fi repeater configuration via a crafted POST to /cgi-bin/cstecgi.cgi, repointing the router to an attacker-controlled upstream access point. No public exploit or CISA KEV listing is identified at time of analysis, and the EPSS probability is low (0.16%), but the flaw is network-reachable with no authentication.
Unauthenticated custom-CGI-module installation on the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets remote attackers plant attacker-controlled CGI code through the UploadCustomModule handler in /cgi-bin/cstecgi.cgi. Because the endpoint enforces no authentication or access control, a single crafted POST request installs an executable module - effectively arbitrary code execution on the device. No public exploit identified at time of analysis; EPSS is low (0.16%, 6th percentile), indicating no observed mass exploitation yet.
Unauthenticated tampering with mesh Wi-Fi pairing on the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets remote attackers manipulate the device's mesh pairing state by posting to the setPairCfg handler of the cstecgi.cgi endpoint, with no credentials required. The flaw is an access-control gap (CWE-284) reported by MITRE; no public exploit code or active exploitation is currently identified, and EPSS is low (0.16%, 6th percentile), so risk is elevated by the trivial preconditions but not by observed attacker interest.
Access-control bypass in the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets unauthenticated remote attackers alter the WAN dial (internet connection) state by POSTing a crafted request to the setManualDialCfg handler in /cgi-bin/cstecgi.cgi. Rated CVSS 9.1 and flagged as an authentication bypass, it requires no credentials and no user interaction, though EPSS is low (0.16%, 6th percentile) and there is no public exploit identified at time of analysis. Only the vendor-coordination disclosure (VulDB/MITRE) exists - this is not in CISA KEV.
Operating-mode tampering in the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets remote unauthenticated attackers alter the device's operating mode by POSTing to the /cgi-bin/cstecgi.cgi endpoint, because the setOpModeCfg handler performs no access-control check. An attacker on the network path can reconfigure how the router operates (e.g. router/AP/repeater mode), disrupting connectivity or repositioning the device for further attack. No public exploit is identified at time of analysis and the CVE is not in CISA KEV.
Exposure of WAN-side administration in the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets unauthenticated remote attackers reconfigure the device by sending a crafted POST request to the setRemoteCfg handler in /cgi-bin/cstecgi.cgi. Because the endpoint fails to enforce authentication (CWE-284), an attacker can enable remote administration and alter security-relevant settings without any credentials. No public exploit is identified at time of analysis, but the flaw carries a CVSS 9.1 and is tagged as an authentication bypass.
Improper access control in the setLedCfg handler of the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets remote unauthenticated attackers change the device's LED configuration by POSTing to the /cgi-bin/cstecgi.cgi endpoint. The flaw exposes a privileged configuration function without any authentication check, though its documented real-world impact is limited to altering LED behavior. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Administrator account takeover in the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets remote unauthenticated attackers overwrite the admin credentials by posting a crafted request to the setPasswordCfg handler on /cgi-bin/cstecgi.cgi. Because the endpoint enforces no access control, any attacker who can reach the web management interface can seize full administrative control of the device. No public exploit identified at time of analysis, but the flaw is trivially reachable and rated CVSS 9.1.
Improper access control in the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets remote unauthenticated attackers modify parental-control settings by sending a crafted POST request to the setParentalRules handler at /cgi-bin/cstecgi.cgi. The flaw requires no authentication and no user interaction, so anyone able to reach the device's web interface can alter or disable parental restrictions. No public exploit identified at time of analysis, and the CVE is not listed in CISA KEV.
Information disclosure in the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets unauthenticated remote attackers read the device's roaming enablement flag by sending a crafted POST request to the getRoamingCfg handler at /cgi-bin/cstecgi.cgi. The flaw is an access-control failure (CWE-284) on a CGI endpoint that should require authentication, and it is reachable over the network with no user interaction. No public exploit code has been identified and it is not listed in CISA KEV, though the trivial request-based trigger makes reproduction straightforward.
Information disclosure in the TOTOLINK T6 mesh router (firmware 4.1.5cu.748_B20211015) lets remote unauthenticated attackers read pairing and mesh-slave configuration by sending a crafted POST request to the getPairCfg handler at /cgi-bin/cstecgi.cgi. The missing access-control check exposes mesh topology and pairing secrets that can facilitate deeper network compromise. No public exploit identified at time of analysis, and the CVE is not listed in CISA KEV; EPSS is not provided.
Uplink/WAN reconfiguration in the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) can be performed by unauthenticated remote attackers because the setWanIeCfg handler fails to enforce access control on the /cgi-bin/cstecgi.cgi endpoint. An attacker on a reachable network can silently rewrite the device's uplink settings, enabling traffic redirection or connectivity disruption. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV; no EPSS score was provided.
Unauthenticated UPnP service-state manipulation in the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets remote attackers toggle the UPnP service by POSTing a crafted request to the /cgi-bin/cstecgi.cgi endpoint, because the setUPnPCfg handler enforces no access control (CWE-284). Any network-reachable attacker can enable UPnP without credentials, opening the door to attacker-controlled port mappings on the LAN. No public exploit is identified at time of analysis, and it is not in CISA KEV, though a VulDB advisory (397330) tracks it.
Access-control bypass in the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets remote unauthenticated attackers modify access-device policies by sending a crafted POST request to the setAccessDeviceCfg handler at /cgi-bin/cstecgi.cgi. Because no authentication is required (CVSS 9.1, AV:N/PR:N), an attacker on the network path can tamper with device access rules that govern which clients and controls apply to the LAN. No public exploit identified at time of analysis and the CVE is not listed in CISA KEV; EPSS is not provided.
Clock manipulation in the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets remote unauthenticated attackers alter the device system time by sending a crafted POST request to the NTPSyncWithHost handler at /cgi-bin/cstecgi.cgi. The endpoint fails to enforce access control (CWE-284), so no credentials are needed. There is no public exploit identified at time of analysis and it is not listed in CISA KEV; note that the assigned CVSS 9.1 appears inflated relative to the described 'change the clock' impact.
Firewall rule tampering in the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets remote unauthenticated attackers delete IP/port filter rules by sending a crafted POST request to the delIpPortFilterRules handler in /cgi-bin/cstecgi.cgi. The missing access-control check means anyone able to reach the device's web interface can silently strip its firewall protections, exposing previously blocked internal services. No public exploit identified at time of analysis, and the flaw is not listed in CISA KEV.
Access-control bypass in the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets a remote, unauthenticated attacker delete Wi-Fi ACL (access control list) rules by sending a crafted POST request to the /cgi-bin/cstecgi.cgi endpoint's delWiFiAclRules handler. Because the handler performs no authentication or authorization check, anyone able to reach the device's web management interface can strip the MAC-based wireless access restrictions. No public exploit identified at time of analysis, and the vulnerability is not listed in CISA KEV; however, CISA's SSVC assessment rates it as automatable with total technical impact.
Server-side request forgery in QD (qd-today), an open-source HTTP timed-task/check-in framework, lets remote unauthenticated attackers coerce the server into issuing arbitrary HTTP(S) requests. The unauthenticated /har/test endpoint passes user-supplied JSON into Fetcher.build_request() (libs/fetcher.py), which builds a Tornado HTTPRequest with no validation of URL scheme, host, or IP range and with TLS verification disabled (validate_cert=False), so an attacker can reach internal services and cloud metadata endpoints. CVSS is 9.1; no public exploit identified at time of analysis, though a referenced GitHub gist may contain technical detail.
Improper access control in TOTOLINK T6 router firmware 4.1.5cu.748_B20211015 lets unauthenticated remote attackers invoke the setWiFiWpsStart function via a crafted POST request to /cgi-bin/cstecgi.cgi, forcing the device to open a WPS wireless pairing window without any credentials. Because WPS pairing enables a nearby attacker to join the wireless network, this exposes the LAN and its traffic to unauthorized access. No public exploit identified at time of analysis, and it is not listed in CISA KEV.
Access control bypass in the TOTOLINK T6 router (firmware 4.1.5cu.748_B20211015) lets remote unauthenticated attackers rewrite the device's MAC filtering rules by sending a crafted POST request to the setMacFilterRules handler at /cgi-bin/cstecgi.cgi. Because no authentication is enforced, an attacker with network reachability to the web interface can alter which clients are permitted or blocked on the network. No public exploit is identified at time of analysis and the CVE is not listed in CISA KEV, but the CGI attack surface on TOTOLINK devices is a well-established botnet target.
Remote code execution in ash_ai (versions 0.1.0 through pre-1.0.0) allows unauthenticated network attackers to execute arbitrary Elixir code on the server by submitting EEx template payloads through prompt action arguments. The AshAi.Actions.Prompt module incorrectly passed function-supplied prompt content - which is frequently assembled from user-controlled action arguments - through EEx.eval_string/2 before forwarding to the AI model, meaning payloads like <%= System.cmd("id", []) %> execute server-side with application process privileges. No public exploit code or CISA KEV listing exists at time of analysis, but the zero-authentication, single-request exploitation path gives this a higher operational priority than the EPSS percentile alone suggests.
Server-side request forgery in @pdfme/common before 5.5.10 allows attackers who control the basePdf template field to force SSR-context servers to issue arbitrary HTTP requests to internal endpoints without any URL validation. The unvalidated fetch() call in getB64BasePdf - reachable from the generator, UI hooks, and UI helper entry points - enables exfiltration from cloud instance metadata services (e.g., AWS IMDS at 169.254.169.254), blind network reconnaissance, and lateral pivot to internal APIs. A detailed proof-of-concept is embedded in GHSA-pgx6-7jcq-2qff; no CISA KEV listing is present at time of analysis.
File upload restriction bypass in Helix Ultimate (Joomla extension by joomshaper.com) versions prior to 2.2.10 allows high-privileged authenticated users to upload arbitrary non-image files - including PHP webshells - by disguising them with raster image file extensions. The extension's upload handler validated only file extension and basic size parameters, not actual file content, enabling disguised executable files to be stored on the web server. No active exploitation or public proof-of-concept has been identified at time of analysis, but successful exploitation yields full server-side code execution with scope change impact.
Path traversal in Eclipse Theia 1.73.0-1.74.x AI Agent Mode allows arbitrary file writes outside the workspace with backend OS user privileges through model-supplied paths that bypass workspace-containment checks. The affected tools - writeFileContent, suggestFileContent, and associated replacement and state helpers - accept relative paths such as ../.bashrc, absolute paths, or tilde-expanded paths like ~/.ssh/authorized_keys without boundary validation. Because path arguments derive from LLM output, an indirect prompt injection attack embedded in developer-loaded content can steer writes to host-executed files and escalate to backend code execution; Agent Mode applies writes silently with no confirmation dialog. No public exploit code or CISA KEV listing exists at time of analysis, though the prompt-injection attack surface is realistic in cloud IDE deployments.
Server-side template injection in the Qute template engine's ReflectionValueResolver allows authenticated remote attackers with the ability to influence template content to bypass Java sandbox restrictions and execute arbitrary OS commands on the server. Affected Red Hat products include Red Hat Build of Quarkus, Red Hat Build of Apache Camel 4 for Quarkus 3, and the JBoss EAP Expansion Pack. No public exploit code or CISA KEV entry has been identified at time of analysis, but the CVSS score of 8.8 and full C/I/A impact make this a high-priority patching target for any Quarkus deployment exposing user-influenced template rendering.
Unauthenticated extension deletion is possible across at least 24 free miniOrange plugin packages for Joomla due to a missing authentication check on extension management functionality. Any network-accessible attacker with no credentials and no user interaction can remove arbitrary installed Joomla extensions, including security-critical ones such as JoomShield or authentication plugins. No public exploit or CISA KEV listing has been identified at time of analysis, but the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms trivial remote exploitation with zero preconditions.
Privilege escalation in MCPHub prior to version 1.0.29 allows any authenticated low-privilege user to modify system-wide configuration via the PUT /api/system-config endpoint. The handler updateSystemConfig never validates req.user.isAdmin, meaning the app-wide authentication middleware - which only confirms a valid session exists - is the sole barrier, granting any account holder effective administrative control over routing rules and server integrations. No public exploit has been identified at time of analysis, but the attack is trivially reproducible given network access and any valid credential.
Memory corruption via classic buffer overflow in WebKitGTK allows remote attackers to achieve full code execution by delivering malicious web content to a victim user. Affecting Red Hat Enterprise Linux versions 6 through 9, the vulnerability requires no authentication and no special configuration - only that a user process attacker-controlled web content through a WebKitGTK-based application. No public exploit has been identified at time of analysis, but the CVSS 8.8 High rating and full CIA triad impact make this a high-priority patching target across the affected RHEL fleet.
SQL injection in Ankara Hosting's Site Management Panel through version 15062026 enables authenticated remote attackers to manipulate backend database queries with full impact on confidentiality, integrity, and availability. The CVSS score of 8.8 (PR:L) reflects that low-privilege panel credentials are required but attack complexity is minimal once access is obtained. No public exploit code or CISA KEV listing has been identified at the time of analysis, though the Turkish CERT (TR-CERT) has published an advisory.
Remote code execution in OpenSearch's SQL plugin cursor pagination component allows authenticated users holding only basic read/search permissions to execute arbitrary code on the server by supplying a crafted serialized cursor parameter to the plugins/sql endpoint. Affecting all versions of self-hosted OpenSearch and Amazon OpenSearch Service up to the patched releases, this CWE-502 deserialization flaw is particularly dangerous because the low privilege bar means any cluster user - not just administrators - can trigger it. Vendor-released patches exist in OpenSearch 2.19.6 and 3.7.0; no public exploit or CISA KEV listing has been identified at time of analysis.
Unauthenticated remote attackers can trigger a full MySQL database dump on any WordPress site running Keep Backup Daily before version 2.1.4 by invoking the publicly exposed `kbd_cron_process` parameter with no credentials required. The generated dump file is stored in the publicly accessible uploads directory with a partially predictable filename derived from the database name, a limited random value, and the current Unix timestamp - making retrieval via brute-force enumeration feasible. No active exploitation is confirmed in CISA KEV at time of analysis, but the attack requires no privileges or special tooling, making it an immediate data-exposure priority for affected deployments.
Missing authorization on Devtron's webhook API token endpoint allows any authenticated user - regardless of privilege level - to retrieve plaintext super-admin JWT tokens, yielding full platform control. The GET /orchestrator/api-token/webhook endpoint in versions through 2.2.0 performs no authorization check beyond validating that a session exists, meaning a low-privilege operator account is sufficient to extract credentials that grant unrestricted administrative access. No patch version has been confirmed in the available references, and no public exploit or CISA KEV listing has been identified at time of analysis.
Policy evaluation bypass in @hulumi/policies before 1.3.2 permits unauthenticated remote attackers to submit forged SecureBucket parent evidence, causing the validator to incorrectly classify unsafe bucket configurations as compliant and bypass associated security controls. The flaw (internally tracked as HULUMI-H1) exists because the validator did not correlate submitted evidence against the expected component-to-resource relationship, allowing fabricated evidence to satisfy policy checks. No public exploit or active exploitation has been identified at time of analysis; a vendor-released patch is available in version 1.3.2.
Incomplete CloudTrail event-selector tampering detection in @hulumi/baseline before 1.3.2 (CWE-778: Insufficient Logging) creates blind spots in AWS audit trail monitoring, allowing threat actors who have already modified CloudTrail event selectors to evade detection by the library's checks. The affected npm package misses specific forms of event-selector manipulation, reducing coverage for changes to audit logging configuration - a technique commonly used to suppress evidence of adversarial cloud activity. No active exploitation is confirmed (not in CISA KEV) and no public exploit code has been identified, but the risk is real for security teams relying on this package as a primary CloudTrail integrity control.
Path traversal in Dokploy's Traefik configuration handler exposes all versions through 0.29.7 to arbitrary file read and write by low-privileged authenticated remote users. The vulnerable function `writeTraefikConfigInPath` in the Settings component fails to sanitize the `path` argument before writing Traefik proxy configuration, enabling attackers to escape the intended directory and interact with sensitive files on the host filesystem. A public exploit is available and the vendor did not respond to responsible disclosure, leaving no official patch in place.
XML external entity injection across three document parsers in YaCy Search Server through version 1.941 enables unauthenticated network attackers to exfiltrate arbitrary local file contents via the search crawler. When the YaCy crawler fetches attacker-controlled SVG, FreeMind, or OpenSearch XML documents containing malicious DOCTYPE SYSTEM entity declarations, the unprotected SAX parsers resolve those entities and write the referenced file contents directly into the searchable index. No public exploit code or active exploitation has been confirmed at time of analysis, but a patch commit is available upstream and the XXE technique is trivially reproducible.
Authentication bypass in Pangolin before 1.22.0 allows any attacker holding a single valid share link - for any resource, in any organization - to authenticate against arbitrary protected resources by supplying an attacker-controlled URL parameter to the share-link authentication endpoint that causes the token verification call to omit the expected resource identifier. All configured authentication layers are bypassed simultaneously, including SSO, resource passwords, PIN codes, email allowlists, and header authentication. CVSS 4.0 scores this 8.6 (High); no public exploit or CISA KEV listing has been identified at time of analysis, but the low exploitation bar - one share link from any resource - makes this a realistic threat in multi-tenant or multi-organization deployments.
Arbitrary code execution in Hulumi before v1.3.2 is possible through a CWE-426 untrusted search path flaw in the threat-model helper script resolution. When workspace-controlled files shadow the intended helper script, any subsequent local skill execution loads the attacker-placed file instead, running arbitrary code under the victim user's context. No KEV listing or public exploit has been identified, but the low-complexity local attack vector makes this a credible risk in shared or CI-driven development environments.
Stored XSS in the Helix Ultimate Joomla extension (versions before 2.2.10) allows authenticated administrators to plant persistent malicious JavaScript through MegaMenu layout configuration fields, which subsequently executes in the browsers of all site visitors who load affected pages. Column and item configuration values within the MegaMenu layout JSON were persisted and rendered without complete contextual escaping, enabling injection of arbitrary HTML and script payloads. The vendor has released version 2.2.10 with stricter sanitization via Joomla's InputFilter and PHP's htmlspecialchars; no public exploit code has been identified at time of analysis and this CVE is not listed in the CISA KEV catalog.
Zip Slip path traversal in Wallos's database restore endpoint allows an authenticated administrator to write arbitrary files - including PHP webshells - directly into the application webroot. The flaw exists in POST /endpoints/db/restore.php, where ZipArchive::extractTo() processes ZIP entries without sanitizing ../ sequences, enabling directory escape before any extension-based filtering runs. An admin who uploads a crafted ZIP with an entry like logos/../../endpoints/shell.php achieves remote code execution on the server. No public exploit or CISA KEV listing has been identified at time of analysis; however, the technique is well-understood and the attack is low-complexity once admin credentials are held.
SSRF via admin-configurable OIDC endpoint URLs in Wallos subscription tracker allows an authenticated admin to direct the server to issue arbitrary outbound HTTP requests, including to cloud provider metadata services and internal network hosts. All Wallos releases prior to 4.9.6 are affected; the OIDC callback handler at includes/oidc/handle_oidc_callback.php:18-49 passes admin-supplied token_url and user_info_url directly to curl_init() without the validate_webhook_url_for_ssrf() protection already applied to logo and webhook URL fields. No public exploit has been identified at time of analysis, and a confirmed vendor patch is available in v4.9.6 released 2026-06-22.
SQL injection in the Charitable WordPress donation plugin (versions <= 1.8.12.1) allows authenticated subscriber-level users to query the underlying database beyond the plugin's own data scope, yielding high confidentiality impact with scope change. The vulnerability requires only a low-privilege WordPress account, which on sites permitting public user registration is trivially obtainable. No public exploit or CISA KEV listing is confirmed at time of analysis, but the low attack complexity and network accessibility make this a credible risk for any WordPress site running the affected plugin with open registration.
Local privilege escalation in ieungSoft Ultra RAMDisk Pro 1.82 allows a low-privileged local user to gain SYSTEM or kernel-level control via improper privilege management in the URDSCSI.sys kernel driver (CWE-266). The vendor did not respond to coordinated disclosure, leaving no official patch; a public proof-of-concept exploit exists, confirmed by the CVSS 4.0 E:P metric and a detailed write-up. No active exploitation has been confirmed in CISA KEV, but the low exploitation barrier (low-privilege local access, no interaction, public PoC) makes this a credible post-compromise escalation tool.
Stored XSS in ash_admin's relationship typeahead components allows an attacker with low-privilege record-creation access to execute arbitrary JavaScript in an administrator's browser. Affected are ash_admin versions 0.13.0 through 1.3.1, where the `RelationshipField` and `ManagedRelationshipSelectField` components render database record label fields unescaped via `Phoenix.HTML.raw/1` after applying search-term highlight markup. A crafted label such as `<img src=x onerror=...>` persists in the database and fires whenever an admin's typeahead dropdown displays the matching record, granting the attacker full admin-level privileges over everything AshAdmin exposes. No public exploit code has been identified at time of analysis; a vendor-released patch is available in version 1.3.1.
Arbitrary file write via path traversal in AshAdmin's file upload handler affects versions 0.13.7 through 1.3.0, enabling any authenticated admin user to write attacker-controlled bytes to any filesystem path writable by the BEAM process. The root cause is that browser-supplied filenames are concatenated into upload paths via Elixir's Path.join/1 without stripping directory components, so a crafted filename such as ../../../../var/www/app/priv/static/evil.ex escapes the randomized temp directory. No public exploit has been identified at time of analysis, but the primitive directly enables remote code execution by overwriting application modules, static assets, cron jobs, or SSH authorized_keys files.
Cookie shadowing via unanchored regex in AshAdmin (versions 0.9.1-1.3.0) allows an attacker who controls a sibling subdomain to inject state cookies that rebind an administrator's LiveSocket session to an arbitrary actor, tenant, or authorization mode - effectively bypassing the admin panel's authorization controls. The client-side JavaScript cookie parser used `new RegExp(name + "=([^;]+)")`, which matches any cookie whose name merely ends with the target name, enabling a shadowing cookie (e.g., `xactor_authorizing` over `actor_authorizing`) set from a sibling subdomain with `Domain=.example.com` to silently win. No public exploit or CISA KEV listing exists at time of analysis, but the integrity impact is high for any multi-subdomain deployment.
Server-Side Request Forgery and structured file disclosure in oasdiff-action prior to version 0.0.51 allows unauthenticated remote attackers to make the GitHub Actions runner fetch arbitrary URLs or read filesystem paths by embedding malicious `$ref` entries in an attacker-controlled OpenAPI spec. The vulnerability is directly exploitable via fork pull requests on public repositories, requiring no interaction from maintainers beyond the normal CI workflow execution. No public exploit has been identified, but the fix PRs (128-130) provide a clear technical blueprint of the attack surface.
Atom table exhaustion in ash_admin's Phoenix LiveView event handlers allows any authenticated user reaching the admin interface to crash the entire BEAM VM node. Two handlers - AshAdmin.PageLive's set_actor and AshAdmin.Components.Resource.Show's calculate - passed unvalidated client strings directly to Module.concat/1 and String.to_atom/1 respectively, minting a permanent new atom per unique request. Because BEAM atoms are never garbage collected and the table is capped at roughly one million entries, flooding either handler terminates the VM and takes down every Elixir application co-hosted on the node. No active exploitation has been confirmed (not in CISA KEV) and no public exploit code has been identified at time of analysis; patch version 1.3.1 is available.